Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/qw-aF3yIkt-72WfpE7ETeHkvHMU.roa
File:                     qw-aF3yIkt-72WfpE7ETeHkvHMU.roa (raw, json)
Hash identifier:          3nZH1KB8lozx5AtSdJomkLmrFoDBz1VyVSOmQdHc1wE=
Subject key identifier:   AB:0F:9A:17:7C:88:92:DF:BB:D9:67:E9:13:B1:13:78:79:2F:1C:C5
Certificate issuer:       /CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Certificate serial:       019423D805E9BC42D1EF4F13DE908ED16DEE
Authority key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/qw-aF3yIkt-72WfpE7ETeHkvHMU.roa
Signing time:             Wed 01 Jan 2025 21:49:07 +0000
ROA not before:           Wed 01 Jan 2025 21:49:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197550
IP address blocks:        46.173.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d8:05:e9:bc:42:d1:ef:4f:13:de:90:8e:d1:6d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
        Validity
            Not Before: Jan  1 21:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ab0f9a177c8892dfbbd967e913b11378792f1cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:cf:7b:d6:f7:ad:bc:c6:a9:5b:ef:75:40:e4:
                    fc:e5:4d:85:7e:fb:15:ad:4a:8c:cc:e1:3f:2e:ff:
                    48:91:05:d5:6a:da:10:02:1e:90:19:d0:55:66:62:
                    d6:76:37:db:50:fa:98:b7:83:06:1b:d7:d6:54:b8:
                    94:eb:5e:c0:b1:c1:4a:60:82:81:24:80:6d:69:39:
                    83:95:d6:87:7d:91:01:34:b7:65:12:65:8c:10:c5:
                    9e:ad:a1:3e:04:c0:18:ae:63:46:4b:37:c0:21:3a:
                    75:7b:19:6b:2b:ca:98:c2:f1:a8:c7:4b:e8:31:0e:
                    05:54:20:f4:4a:07:c7:c7:6b:96:90:df:18:89:2a:
                    fc:9e:a0:0f:ff:2f:8c:95:4d:1d:8f:af:14:d7:6d:
                    99:bd:05:0f:35:a1:d8:ad:e6:8c:f1:cf:80:05:d6:
                    38:e4:d9:c7:2e:ae:6f:13:26:12:bf:be:f1:fc:e7:
                    f1:6d:4e:a9:1c:14:46:13:eb:a7:a1:71:43:89:83:
                    64:74:30:2c:ed:99:a0:ba:b2:57:9a:c8:91:a2:98:
                    3c:37:7f:bc:e5:6b:66:1a:5b:55:8e:4f:b5:de:67:
                    9c:09:6f:74:9c:c7:cb:ea:10:30:cd:f0:ca:65:a3:
                    7c:d9:41:be:56:7f:e6:e1:c8:07:51:fe:3a:85:72:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0F:9A:17:7C:88:92:DF:BB:D9:67:E9:13:B1:13:78:79:2F:1C:C5
            X509v3 Authority Key Identifier:
                keyid:9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/qw-aF3yIkt-72WfpE7ETeHkvHMU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.173.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e9:8d:33:d4:62:3b:4a:5d:dd:02:99:40:bd:68:d5:aa:15:e9:
         20:40:c3:27:dd:66:aa:7c:9c:d2:8b:e2:f5:cc:dd:3d:0f:44:
         c5:d3:eb:98:1b:83:8d:64:e9:43:49:f5:63:c3:65:35:53:81:
         ef:4a:0d:97:a8:38:86:0c:a1:a4:af:32:fe:18:86:ef:f7:08:
         5e:02:3a:66:fd:65:a4:a2:7f:df:66:50:ca:11:1e:6e:52:5b:
         eb:0b:7a:90:cf:0a:7d:8c:2a:31:dc:05:a6:44:47:69:df:8f:
         76:32:4f:c2:25:79:d0:3c:6a:32:18:98:9d:bf:b7:71:2a:74:
         82:8f:1e:b4:e7:10:8f:33:0c:8e:de:ae:b4:3d:f2:b8:30:70:
         db:4c:8c:3c:3c:87:72:3e:81:5e:3a:fa:18:52:a8:28:69:43:
         7c:86:d1:5c:fe:78:34:48:07:17:b1:cb:12:56:1b:30:dc:34:
         d4:3f:16:50:3a:13:e0:2e:ba:51:73:6e:df:78:88:3c:e3:c0:
         d9:d2:c9:e8:cd:1e:21:c6:13:c5:79:b0:33:0a:e0:6d:03:31:
         74:6d:09:44:ab:15:13:cd:9b:74:50:a1:b4:f4:ae:aa:2f:a0:
         28:03:1c:cd:21:a6:ea:a4:c9:bc:de:c5:34:7e:45:6f:c5:e6:
         8e:ec:0d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----